PUBLIC KEY CERTIFICATE REVOCATION LIST GENERATION APPARATUS, REVOCATION JUDGEMENT APPARATUS, AND AUTHENTICATION SYSTEM
    5.
    发明公开
    PUBLIC KEY CERTIFICATE REVOCATION LIST GENERATION APPARATUS, REVOCATION JUDGEMENT APPARATUS, AND AUTHENTICATION SYSTEM 有权
    制造装置公钥证书吊销列表,停药考核装置及鉴定系统

    公开(公告)号:EP1510036A1

    公开(公告)日:2005-03-02

    申请号:EP03749988.6

    申请日:2003-04-14

    IPC分类号: H04L9/32

    摘要: A revocation list generation apparatus and a revocation judgement apparatus suppress the size of a CRL even if a number of public key certificates to be revoked increases.The revocation list generation apparatus, in which leaves in a tree structure correspond to public key certificates, which are identified by leaf identifiers, and nodes from a leaf that corresponds to a revoked public key certificate to a root are revoked, generates, for each revoked node excluding leaves, revocation information showing whether directly subordinate nodes are revoked, and generates a revocation list that includes a plurality of pieces of revocation information arranged in an particular order.The revocation judgement apparatus obtains the revocation list, attempts to construct a path from the root to the leaf, using the revocation information in the revocation list, and when the leaf is included in the constructed path, judges the obtained public key certificate is revoked.

    PUBLIC KEY CERTIFICATE REVOCATION LIST GENERATION APPARATUS, REVOCATION JUDGEMENT APPARATUS, AND AUTHENTICATION SYSTEM
    10.
    发明授权
    PUBLIC KEY CERTIFICATE REVOCATION LIST GENERATION APPARATUS, REVOCATION JUDGEMENT APPARATUS, AND AUTHENTICATION SYSTEM 有权
    制造装置公钥证书吊销列表,停药考核装置及鉴定系统

    公开(公告)号:EP1510036B1

    公开(公告)日:2006-12-13

    申请号:EP03749988.6

    申请日:2003-04-14

    IPC分类号: H04L9/32

    摘要: A revocation list generation apparatus and a revocation judgement apparatus suppress the size of a CRL even if a number of public key certificates to be revoked increases.The revocation list generation apparatus, in which leaves in a tree structure correspond to public key certificates, which are identified by leaf identifiers, and nodes from a leaf that corresponds to a revoked public key certificate to a root are revoked, generates, for each revoked node excluding leaves, revocation information showing whether directly subordinate nodes are revoked, and generates a revocation list that includes a plurality of pieces of revocation information arranged in an particular order.The revocation judgement apparatus obtains the revocation list, attempts to construct a path from the root to the leaf, using the revocation information in the revocation list, and when the leaf is included in the constructed path, judges the obtained public key certificate is revoked.